Does JotForm forms comply with HIPAA requirements for protecting PHI?

  • Profile Image
    Cheryle Totten 
    Asked on December 02, 2014 at 05:24 PM

    I am looking for an easy to use web form builder like JotForm to create forms for a company intranet site that would send data to recipients in areas across the company.  Because these forms would be collecting Personal Health Information (PHI) we need a solution that must comply with HIPAA privacy and security requirements for protecting PHI, including electronic PHI. 

    Does JotForm comply with HIPAA requirements?   Please provide details about how security is set up on JotForm servers and how that security is monitored.

    Can JotForm forms be used without storing data entered by users on JotForm servers? 

  • Profile Image
    Answered on December 02, 2014 at 06:14 PM

    Update (April 19, 2018) HIPAA is available for our Gold & Silver plan. 

    We use a powerful cloud service which provides encrypted storage to keep all our information secure from outside attacks, however you need to take some points in consideration to be compliant with HIPPA. Please check the following thread: in which our support manager explains in detail about JotForm and HIPPA compliance.

    Let us know if this answers your questions.
    Best Regards.

  • Profile Image
    Answered on April 13, 2018 at 11:26 AM

    Great news! JotForm now offers HIPAA compliance. This means users in the healthcare industry can use JotForm to collect sensitive patient information through consent and onboarding forms, medical history updates, online bill payments, and prescription refill requests. 

    HIPAA-compliant forms require a Gold pricing plan, which is only $99 a month or a Silver pricing plan, which is $39 a month. A business associate agreement (BAA) is also available upon request.

    For more information about our HIPAA-compliant forms, visit

  • Profile Image
    Answered on April 19, 2018 at 10:11 AM

    Update: HIPAA is available for the Silver plan as well.